File manager - Edit - /opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/PublicKey/__pycache__/ECC.cpython-310.pyc
Back
o ;j_� � @ s� d dl mZ d dlZd dlZd dlZd dlmZmZmZm Z m Z d dl m Z d dl mZmZmZmZ d dlmZmZmZ d dlmZmZ d dlmZ d d lm Z m Z m Z d d lm Z G d d � d e!�Z"G dd� de#�Z$dd� Z%dd� Z&d6dd�Z'dd� Z(d7dd�Z)dd� Z*d d � Z+d d � Z,d d!� Z-d"d#� Z.d$d%� Z/d&d'� Z0d(d)� Z1d*d+� Z2d6d,d-�Z3e4d.kr�d dl5Z5d/Z6e d0 j7�8� Z9d1Z:e5�5� Z;e<e:�D ]Z=e9e6 Z>q�e?d2e5�5� e; e: d3 d4� e5�5� Z;e<e:�D ]Z=e>e6 Z>q�e?d5e5�5� e; e: d3 d4� dS dS )8� )�print_functionN)�bord�tobytes�tostr�bchr� is_string)�Integer)� DerObjectId�DerOctetString� DerSequence� DerBitString)� _expand_subject_public_key_info� _create_subject_public_key_info� _extract_subject_public_key_info)�SHA512�SHAKE256)�get_random_bytes� )�EccPoint� EccXPoint�_curves)�CurveIDc @ s e Zd ZdS )�UnsupportedEccFeatureN)�__name__� __module__� __qualname__� r r �L/opt/saltstack/salt/lib/python3.10/site-packages/Cryptodome/PublicKey/ECC.pyr 7 s r c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z e dd� �Z e dd� �Z e dd� �Z dd� Zdd� Zdd� Zdd� Zd d � Zd0d d �Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/S )1�EccKeya� Class defining an ECC key. Do not instantiate directly. Use :func:`generate`, :func:`construct` or :func:`import_key` instead. :ivar curve: The **canonical** name of the curve as defined in the `ECC table`_. :vartype curve: string :ivar pointQ: an ECC point representing the public component. :vartype pointQ: :class:`EccPoint` or :class:`EccXPoint` :ivar d: A scalar that represents the private component in NIST P curves. It is smaller than the order of the generator point. :vartype d: integer :ivar seed: A seed that represents the private component in Ed22519 (32 bytes), Curve25519 (32 bytes), Curve448 (56 bytes), Ed448 (57 bytes). :vartype seed: bytes c K sd t |�}|�dd�}|�dd�| _|�dd�| _|�dd�| _|du r*| jr*| jj}|r4tdt|� ��|tvr>t d| ��t| | _ | j j | _t | jdu�t | jdu� }|dkre| jdu rct d ��dS |d krmt d ��| j j tjkr�| jdur}t d ��t| j�d kr�t d��t�| j��� }|d d� | _t|dd � �}|d dM < |d d@ dB |d< tj|dd�| _dS | j j tjk�r | jdur�t d ��t| j�dkr�t d��t�| j��d�}|dd� | _t|dd� �}|d dM < |d dO < d|d< tj|dd�| _dS | j j tjk�rL| jdu�r t d ��t| j�d k�r+t d ��t| j�}|d dM < |d d@ dB |d< tj|dd�| _dS | j j tj k�r�| jdu�r^t d ��t| j�dk�rjt d ��t| j�}|d dM < |d dO < tj|dd�| _dS | jdu�r�t d ��t| j�| _d | j k�r�| j j k �s�t d �� t d ��dS )!a� Create a new ECC key Keywords: curve : string The name of the curve. d : integer Mandatory for a private key one NIST P curves. It must be in the range ``[1..order-1]``. seed : bytes Mandatory for a private key on Ed25519 (32 bytes), Curve25519 (32 bytes), Curve448 (56 bytes) or Ed448 (57 bytes). point : EccPoint or EccXPoint Mandatory for a public key. If provided for a private key, the implementation will NOT check whether it matches ``d``. Only one parameter among ``d``, ``seed`` or ``point`` may be used. �curveN�d�seed�point�Unknown parameters: zUnsupported curve (%s)r zGAt lest one between parameters 'point', 'd' or 'seed' must be specified� z,Parameters d and seed are mutually exclusivez/Parameter d can only be used with NIST P curves� z0Parameter seed must be 32 bytes long for Ed25519� � � �@ �little�� byteorder�9 z.Parameter seed must be 57 bytes long for Ed448�r � �7 � �8 z3Parameter seed must be 32 bytes long for Curve25519z1Parameter seed must be 56 bytes long for Curve448z2Parameter 'seed' cannot be used with NIST P-curvesr z;Parameter d must be an integer smaller than the curve order) �dict�pop�_d�_seed�_pointr � TypeError�strr � ValueError�_curve� canonical�int�id�_CurveID�ED25519�lenr �new�digest�_prefix� bytearrayr � from_bytes�ED448r �read� CURVE25519�CURVE448�order)�self�kwargsZkwargs_� curve_name�countZ seed_hash�tmpr r r �__init__Q s� ��zEccKey.__init__c C s. t |t�sdS |�� | �� krdS |j| jkS )NF)� isinstancer � has_private�pointQ)rL �otherr r r �__eq__� s z EccKey.__eq__c C s� | � � r| jjrdtt�| j�� }n dt| j� }nd}| jj t j t j fv r6| j j}d| jj||f }|S | j j\}}d| jj|||f }|S )Nz , seed=%sz, d=%d� z EccKey(curve='%s', point_x=%d%s)z,EccKey(curve='%s', point_x=%d, point_y=%d%s))rS r; � is_edwardsr �binascii�hexlifyr6 r= r5 r> r? rI rJ rT �xr< �xy)rL �extrar[ �result�yr r r �__repr__� s � �zEccKey.__repr__c C s | j duS )zJ``True`` if this key can be used for making signatures or decrypting data.N)r5 �rL r r r rS � s zEccKey.has_privatec C s� d| k r | j jk sJ � J �| j j}tjd|d�}| j| }|| �|�}| j j| j| }||| || | }||fS )Nr r )� min_inclusive� max_exclusive)r; rK r � random_ranger5 �inverse�Gr[ ) rL �z�krK ZblindZblind_dZ inv_blind_k�r�sr r r �_sign� s � z EccKey._signc C sR | j j}|d �|�}| j j|| | }| j||d | }|| j|d kS )Nr r )r; rK re rf rT r[ )rL rg ZrsrK ZsinvZpoint1Zpoint2r r r �_verify� s zEccKey._verifyc C � | � � std��| jS �Nz This is not a private ECC key)rS r: r5 ra r r r r � � zEccKey.dc C rm rn )rS r: r6 ra r r r r! � ro z EccKey.seedc C s | j d u r | jj| j | _ | j S �N)r7 r; rf r5 ra r r r rT � s z EccKey.pointQc C s t | jj| jd�S )z^A matching ECC public key. Returns: a new :class:`EccKey` object )r r" )r r; r< rT ra r r r � public_key� s zEccKey.public_keyc C sn | j jstd��| j�� }|r%| jj�� rd}nd}|| jj�|� }|S d| jj�|� | jj�|� }|S )Nz/SEC1 format is only supported for NIST P curves� � � ) r; Zis_weierstrassr: rT � size_in_bytesr_ �is_oddr[ �to_bytes)rL �compress� modulus_bytes� first_byterq r r r � _export_SEC1 s" �� � �zEccKey._export_SEC1c C s� | j j\}}| jjtjkr&t|jddd��}|d@ d> |d B |d< t |�S | jjtjkrBt|jddd��}|d@ d> |d< t |�S t d ��) Nr% r* r+ r � r' r- r2 zNot an EdDSA key to export) rT r\ r; r> r? r@ rE rw rG r: �bytes)rL r[ r_ r^ r r r �_export_eddsa_public s ��zEccKey._export_eddsa_publicc C s< | j jstd��| jj}| j�� }t|j|dd��}t|�S )Nz Not a Montgomery key to exportr* r+ ) r; � is_montgomeryr: rT r[ ru rE rw r} )rL r[ Z field_sizer^ r r r �_export_montgomery_public, s z EccKey._export_montgomery_publicc C sb | j jr| j j}| �� }d }n | j jr | j j}| �� }d }n d}| �|�}t| j j�}t|||�S )N�1.2.840.10045.2.1) r; rX �oidr~ r r� r{ r r )rL rx r� rq �paramsr r r � _export_subjectPublicKeyInfo4 s �z#EccKey._export_subjectPublicKeyInfoTc C sx | � � sJ �| j�� }d| jj�|� | jj�|� }dt| j�|��t| j j dd�t |dd�g}|s6|d= t |�� � S )Nrt r r �Zexplicitr$ )rS rT ru r[ rw r_ r r r r; r� r r �encode)rL �include_ec_paramsry rq �seqr r r �_export_rfc5915_private_derF s � � � z"EccKey._export_rfc5915_private_derc K s� ddl m} |�dd �d urd|vrtd��| jd ur)| jj}t| j��� }d }nd}| j dd�}t | jj�}|j ||fd |i|��}|S ) Nr ��PKCS8� passphrase� protectionz3At least the 'protection' parameter must be presentr� F)r� Z key_params) � Cryptodome.IOr� �getr: r6 r; r� r r� r� r �wrap)rL rM r� r� � private_keyr� r^ r r r � _export_pkcs8a s$ ���zEccKey._export_pkcs8c C s" ddl m} | �|�}|�|d�S )Nr ��PEMz PUBLIC KEY)r� r� r� r� )rL rx r� � encoded_derr r r �_export_public_pemv s zEccKey._export_public_pemc K s* ddl m} | �� }|j|d|fi |��S )Nr r� zEC PRIVATE KEY)r� r� r� r� �rL r� rM r� r� r r r �_export_private_pem| s zEccKey._export_private_pemc C s ddl m} | �� }|�|d�S )Nr r� z PRIVATE KEY)r� r� r� r� )rL r� r� r r r �(_export_private_clear_pkcs8_in_clear_pem� s z/EccKey._export_private_clear_pkcs8_in_clear_pemc K sD ddl m} |s J �d|vrtd��| jdd|i|��}|�|d�S )Nr r� r� z5At least the 'protection' parameter should be presentr� zENCRYPTED PRIVATE KEYr )r� r� r: r� r� r� r r r �,_export_private_encrypted_pkcs8_in_clear_pem� s z3EccKey._export_private_encrypted_pkcs8_in_clear_pemc C s� | � � rtd��| jj}|d u rtd| j ��|dkr(| �� }t|�t|�f}n;| j�� }|rCd| jj � � }t |�| jj � |� }nd| jj � |� | jj � |� }|�d�d }t|�t|�|f}d�dd � |D ��}|d tt�|�� S ) Nz"Cannot export OpenSSH private keysz Cannot export %s keys as OpenSSH� ssh-ed25519r$ rt �-� c S s g | ] }t �d t|��| �qS )�>I)�struct�packrA )�.0r[ r r r � <listcomp>� s z*EccKey._export_openssh.<locals>.<listcomp>� )rS r: r; �opensshr r~ r rT ru r_ rv r r[ rw �split�joinr rY � b2a_base64) rL rx �descrq �compsry rz �middleZblobr r r �_export_openssh� s. � � �zEccKey._export_opensshc K s� |� � }|�d�}|dvrtd| ��|�dd�}| �� r�|�dd�}t|�r1t|�}|s1td��|�d d �}|du rS| jjrCtd ��| jjrKtd ��d |v rStd��|dkrq|rh|rd| j |fi |��S | � � S | j |fi |��S |dkr�|r}|s}td��|r�| j dd|i|��S | � � S td| ��|r�td| ��|dkr�| �|�S |dkr�| �|�S |dkr�| �|�S |dkr�| jjr�| �� S | jjr�| �� S | �|�S | �|�S )a� Export this ECC key. Args: format (string): The output format: - ``'DER'``. The key will be encoded in ASN.1 DER format (binary). For a public key, the ASN.1 ``subjectPublicKeyInfo`` structure defined in `RFC5480`_ will be used. For a private key, the ASN.1 ``ECPrivateKey`` structure defined in `RFC5915`_ is used instead (possibly within a PKCS#8 envelope, see the ``use_pkcs8`` flag below). - ``'PEM'``. The key will be encoded in a PEM_ envelope (ASCII). - ``'OpenSSH'``. The key will be encoded in the OpenSSH_ format (ASCII, public keys only). - ``'SEC1'``. The public key (i.e., the EC point) will be encoded into ``bytes`` according to Section 2.3.3 of `SEC1`_ (which is a subset of the older X9.62 ITU standard). Only for NIST P-curves. - ``'raw'``. The public key will be encoded as ``bytes``, without any metadata. * For NIST P-curves: equivalent to ``'SEC1'``. * For Ed25519 and Ed448: ``bytes`` in the format defined in `RFC8032`_. * For Curve25519 and Curve448: ``bytes`` in the format defined in `RFC7748`_. passphrase (bytes or string): (*Private keys only*) The passphrase to protect the private key. use_pkcs8 (boolean): (*Private keys only*) If ``True`` (default and recommended), the `PKCS#8`_ representation will be used. It must be ``True`` for Ed25519, Ed448, Curve25519, and Curve448. If ``False`` and a passphrase is present, the obsolete PEM encryption will be used. protection (string): When a private key is exported with password-protection and PKCS#8 (both ``DER`` and ``PEM`` formats), this parameter MUST be present, For all possible protection schemes, refer to :ref:`the encryption parameters of PKCS#8<enc_params>`. It is recommended to use ``'PBKDF2WithHMAC-SHA512AndAES128-CBC'``. compress (boolean): If ``True``, the method returns a more compact representation of the public key, with the X-coordinate only. If ``False`` (default), the method returns the full public key. This parameter is ignored for Ed25519/Ed448/Curve25519/Curve448, as compression is mandatory. prot_params (dict): When a private key is exported with password-protection and PKCS#8 (both ``DER`` and ``PEM`` formats), this dictionary contains the parameters to use to derive the encryption key from the passphrase. For all possible values, refer to :ref:`the encryption parameters of PKCS#8<enc_params>`. The recommendation is to use ``{'iteration_count':21000}`` for PBKDF2, and ``{'iteration_count':131072}`` for scrypt. .. warning:: If you don't provide a passphrase, the private key will be exported in the clear! .. note:: When exporting a private key with password-protection and `PKCS#8`_ (both ``DER`` and ``PEM`` formats), any extra parameters to ``export_key()`` will be passed to :mod:`Cryptodome.IO.PKCS8`. .. _PEM: http://www.ietf.org/rfc/rfc1421.txt .. _`PEM encryption`: http://www.ietf.org/rfc/rfc1423.txt .. _OpenSSH: http://www.openssh.com/txt/rfc5656.txt .. _RFC5480: https://tools.ietf.org/html/rfc5480 .. _SEC1: https://www.secg.org/sec1-v2.pdf .. _RFC7748: https://tools.ietf.org/html/rfc7748 Returns: A multi-line string (for ``'PEM'`` and ``'OpenSSH'``) or ``bytes`` (for ``'DER'``, ``'SEC1'``, and ``'raw'``) with the encoded key. �format)r� �DERZOpenSSH�SEC1�rawzUnknown format '%s'rx Fr� NzEmpty passphrase� use_pkcs8Tz%'pkcs8' must be True for EdDSA curvesz#'pkcs8' must be True for Curve25519r� z)'protection' is only supported for PKCS#8r� r� z8Private keys can only be encrpyted with DER using PKCS#8z2Private keys cannot be exported in the '%s' formatzUnexpected parameters: '%s'r� r� r )�copyr4 r: rS r r r; rX r r� r� r� r� r� r� r� r{ r~ r� r� )rL rM �argsZ ext_formatrx r� r� r r r � export_key� sb Z � zEccKey.export_keyN)T)r r r �__doc__rQ rV r` rS rk rl �propertyr r! rT rq r{ r~ r� r� r� r� r� r� r� r� r� r� r r r r r ; s6 b r c K s | � d�}t| }| � dt�}| rtdt| � ��t| jtjkr-|d�}t||d�}|S t| jtj krA|d�}t||d�}|S t| jtj kr]|d�}t||d�}t| � |j � |S t| jtj kry|d�}t||d�}t| � |j � |S tjd|j|d �}t||d �}|S ) a5 Generate a new private key on the given curve. Args: curve (string): Mandatory. It must be a curve name defined in the `ECC table`_. randfunc (callable): Optional. The RNG to read randomness from. If ``None``, :func:`Cryptodome.Random.get_random_bytes` is used. r �randfuncr# r% �r r! r- r2 r )rb rc r� )r r )r4 r r r8 r9 r> r? r@ r rG rI �validaterT rJ r rd rK )rM rN r r� r! �new_keyr r r r �generateF s: � � � �� r� c K s | d }t | }| �dd�}| �dd�}d| v r td��|jtjkr<|dur-t||�| d< tdi | ��}|�|j � |S |jtj kr\|durMt||�| d< tdi | ��}|�|j � |S d||fvrjt |||�| d< tdi | ��}|� � r�d| v r�|j |j }|j||fkr�td��|S ) a� Build a new ECC key (private or public) starting from some base components. In most cases, you will already have an existing key which you can read in with :func:`import_key` instead of this function. Args: curve (string): Mandatory. The name of the elliptic curve, as defined in the `ECC table`_. d (integer): Mandatory for a private key and a NIST P-curve (e.g., P-256). It must be an integer in the range ``[1..order-1]``. seed (bytes): Mandatory for a private key and curves Ed25519 (32 bytes), Curve25519 (32 bytes), Curve448 (56 bytes) and Ed448 (57 bytes). point_x (integer): The X coordinate (affine) of the ECC point. Mandatory for a public key. point_y (integer): The Y coordinate (affine) of the ECC point. Mandatory for a public key, except for Curve25519 and Curve448. Returns: :class:`EccKey` : a new ECC key object r �point_xN�point_yr" zUnknown keyword: pointz(Private and public ECC keys do not matchr )r r4 r8 r> r? rI r r r� rT rJ r rS rf r r\ r: )rM rN r r� r� r� Zpub_keyr r r � constructp s4 ! � � r� c C sP t �� D ]\}}|r|j|kr n||kr nq|r td| ��td| ��|j�� }t| d �}|dkrZt| �dd| krCtd��t � | d|d � �}t � | |d d� �}nG|d v r�t| �d| krjtd��t � | dd� �}|d |d |j � |j�}|dkr�|� � r�|j| }|d kr�|�� r�|j| }ntd ��t|||d �S ) a Convert an encoded EC point into an EccKey object ec_point: byte string with the EC point (SEC1-encoded) curve_oid: string with the name the curve curve_name: string with the OID of the curve Either curve_id or curve_name must be specified � Unsupported ECC curve (OID: %s)zUnsupported ECC curve (%s)r � r r$ zIncorrect EC point lengthN�r$ � r� zIncorrect EC point encoding�r r� r� )r �itemsr� r �pru r rA r: r rF �b�sqrtrv Zis_evenr� ) �ec_point� curve_oidrN Z _curve_namer ry Z point_typer[ r_ r r r �_import_public_der� s8 � �r� c G s t | �\}}}d}dtfdtfd�}dtfdtfd�}||v rB|s'td| ��z t� �|�j}W n ty; td ��w t ||d �S ||v ra|| \} } |rTtd | ��| |�\} } t | | | d �S ||v r}|| \} } |rstd | ��| |�} t | | d �S t d| ��)z4Convert a subjectPublicKeyInfo into an EccKey object�r� z 1.3.132.1.12z 1.3.132.1.13�Ed25519�Ed448�z 1.3.101.112z 1.3.101.113� Curve25519�Curve448�z 1.3.101.110z 1.3.101.111z%Missing ECC parameters for ECC OID %szError decoding namedCurve�r� z(Unexpected ECC parameters for ECC OID %s)r� r� r )r� r zUnsupported ECC OID: %s) r �_import_ed25519_public_key�_import_ed448_public_key� _import_curve25519_public_key�_import_curve448_public_keyr: r �decode�valuer� r� r )�encodedrM r� r� r� � nist_p_oids� eddsa_oids�xdh_oidsr� rN �import_eddsa_public_keyr[ r_ Zimport_xdh_public_keyr r r � _import_subjectPublicKeyInfo� s< �� � r� c C sr t � j| dd�}|d dkrtd��t� �|d �j}d}|t|�k rLz tdd��|| �j}|d ur;||kr;td��|}|d7 }W n tyK Y nw |d u rTtd ��t� � D ] \}}|j |krc nqXt d | ��|j � � } t|�| krytd ��d } } |t|�k r�z tdd��|| �j} t| |d �} | jj} | jj} |d7 }W n ty� Y nw t�|�}t||| | d �S )N�r$ r� r� )Z nr_elementsr r z!Incorrect ECC private key versionr$ r� zCurve mismatchzNo curve foundr� zPrivate key is too smallr� )r r r� r� )r r� r: r �payloadrA r r� r r� r� r r� ru r r� rT r[ r_ r rF r� )r� r� r� Zec_private_keyZ scalar_bytesZ next_element� parametersrN r ry r� r� Zpublic_key_encrq r r r r �_import_rfc5915_der2 sL � � � r� c C s� ddl m} |�| |�\}}}d}ddd�}ddd �}||v r,t� �|�j} t||| �S ||v rI|d ur8td ��d } t� �|�j } t || | d �S ||v rl|| } |d ur[td | ��d } t� �|�j } t || | d �S t d | ��)Nr r� r� r� r� r� r� r� r� z.EdDSA ECC private key must not have parametersr� z+%s ECC private key must not have parametersz!Unsupported ECC purpose (OID: %s)) r� r� �unwrapr r� r� r� r: r r� r� r ) r� r� r� Zalgo_oidr� r� r� r� r� r� r! rN r r r � _import_pkcs8m s8 �� � r� c G s t | �}t|�S rp )r r� )r� rM Zsp_infor r r �_import_x509_cert� s r� c C s zt | |�W S ty } z|�d }~w tttfy Y nw zt| |�W S ty4 } z|�d }~w tttfy? Y nw zt| |�W S tyT } z|�d }~w tttfy_ Y nw zt| |�W S tyt } z|�d }~w tttfy� Y td��w )NzNot an ECC DER key)r� r r: r8 � IndexErrorr� r� r� )r� r� �errr r r � _import_der� sB �� �� �� ��r� c C s� | � d�}t|�dvrtd��z�t�|d �}g }t|�dkrDt�d|d d� �d }|�|dd| � � |d| d � }t|�dks |d |d krPtd��|d �d �r�t � � D ]#\}}|j d u req[|j �d �slq[t |j � d �d �}|d |kr~ nq[td | ��t |d |jd�}W |S |d dkr�t|d �\} } td| | d�}W |S td|d �� tttjfy� td|d ��w )N� r� zNot an openssh public keyr r� r� r z Mismatch in openssh public key� ecdsa-sha2-� ecdsa-sha2r� r$ zUnsupported ECC curve: r� � ssh-ed25519r� r� zUnsupported SSH key type: z Error parsing SSH key type: )r� rA r: rY � a2b_base64r� �unpack�append� startswithr r� r� r r� r� r� r� r� r8 �Error) r� �partsZ keystringZkeypartsZlkrN r r� Zecc_keyr[ r_ r r r �_import_openssh_public� sD � � ���r� c C s� ddl m}m}m}m} || |�\}}ddtdfi}|�d�r�||�\} }| tvr/td| ��t| } | j d d } ||�\} }t | d �d krLt d ��t | �d | d krZt d��t �| dd| � �} t �| d| d � �}||�\}}t �|�}|| d�}n/||v r�|| \}}}||�\} }|| �\} }||�\}}|d |� }||d�}nt d| ��||�\}}||� td| |d�|��S )Nr )� import_openssh_private_generic� read_bytes� read_string� check_paddingr� r� r% r� zUnsupported ECC curve %sr| � r r� z/Only uncompressed OpenSSH EC keys are supportedr$ zIncorrect public key length)r r )r! r z Unsupport SSH agent key type:)r� r� r )Z_opensshr� r� r� r� r� r� r r Z modulus_bitsr r: rA r rF r� )�data�passwordr� r� r� r� Zkey_typeZ decryptedZ eddsa_keysZecdsa_curve_namer ry rq r� r� r� r r� rN r� Zseed_lenZprivate_public_keyr! �_Zpaddedr r r �_import_openssh_private_ecc� s> � r� c C s� t | �dkr td��td�}d}t| �}|d d? }|d dM < tj|dd �}||kr1td ��|d kr7d S |d d | }|d | | d | }z%|�|�}|| | } t�| |�} | d @ |krl|| } W | |fS W | |fS ty{ td��w )ai Import an Ed25519 ECC public key, encoded as raw bytes as described in RFC8032_. Args: encoded (bytes): The Ed25519 public key to import. It must be 32 bytes long. Returns: x and y (integer) Raises: ValueError: when the given key cannot be parsed. .. _RFC8032: https://datatracker.ietf.org/doc/html/rfc8032 r% z9Incorrect length. Only Ed25519 public keys are supported.l �����������������l �x�&(7Z/� ;(P8 �s�e:�8�� w6Rr' r| r( r* r+ zInvalid Ed25519 key (y)r �r r r$ zInvalid Ed25519 public key)rA r: r rE rF re �_tonelli_shanks� r� r� r r_ Zx_lsbr� �u�vZv_invZx2r� r r r r� ! s4 � ��r� c C s> t | �dkr td��t| �}|d dM < tj|dd�}|S )ah Import a Curve25519 ECC public key, encoded as raw bytes as described in RFC7748_. Args: encoded (bytes): The Curve25519 public key to import. It must be 32 bytes long. Returns: x (integer) Raises: ValueError: when the given key cannot be parsed. .. _RFC7748: https://datatracker.ietf.org/doc/html/rfc7748 r% z Incorrect Curve25519 key lengthr' r( r* r+ )rA r: rE r rF )r� r[ r� r r r r� N s r� c C s& t | �dkr td��tj| dd�}|S )ad Import a Curve448 ECC public key, encoded as raw bytes as described in RFC7748_. Args: encoded (bytes): The Curve448 public key to import. It must be 56 bytes long. Returns: x (integer) Raises: ValueError: when the given key cannot be parsed. .. _RFC7748: https://datatracker.ietf.org/doc/html/rfc7748 r2 z Incorrect Curve448 key lengthr* r+ )rA r: r rF )r� r� r r r r� j s r� c C s� t | �dkr td��td j}|d }| dd� }t| d �d? }tj|dd �}||kr0td ��|d kr6d S |d d | }|d | | d | }z%|�|�}|| | } t�| |�} | d @ |krk|| } W | |fS W | |fS tyz td��w )ag Import an Ed448 ECC public key, encoded as raw bytes as described in RFC8032_. Args: encoded (bytes): The Ed448 public key to import. It must be 57 bytes long. Returns: x and y (integer) Raises: ValueError: when the given key cannot be parsed. .. _RFC8032: https://datatracker.ietf.org/doc/html/rfc8032 r- z7Incorrect length. Only Ed448 public keys are supported.Zcurve448i�� Nr2 r| r* r+ zInvalid Ed448 key (y)r r� r$ zInvalid Ed448 public key) rA r: r r� r r rF re r� r� r r r r� � s2 � ��r� c C s` ddl m} t| �} |durt|�}| �d�r+t| �}|�||�\}}}t||�}|S | �d�rtt| �}d} d} tj| d | d |tj d �}|�||�\} }}|rSd}zt | |�}W |S t yi } z| �d} ~ w t ys t d ��w | �d �r}t | �S t| �dkr�t| d �d kr�t | |�S t| �dkr�t| d �dv r�|du r�t d��t| |d�S t d��)a� Import an ECC key (public or private). Args: encoded (bytes or multi-line string): The ECC key to import. The function will try to automatically detect the right format. Supported formats for an ECC **public** key: * X.509 certificate: binary (DER) or ASCII (PEM). * X.509 ``subjectPublicKeyInfo``: binary (DER) or ASCII (PEM). * SEC1_ (or X9.62), as ``bytes``. NIST P curves only. You must also provide the ``curve_name`` (with a value from the `ECC table`_) * OpenSSH line, defined in RFC5656_ and RFC8709_ (ASCII). This is normally the content of files like ``~/.ssh/id_ecdsa.pub``. Supported formats for an ECC **private** key: * A binary ``ECPrivateKey`` structure, as defined in `RFC5915`_ (DER). NIST P curves only. * A `PKCS#8`_ structure (or the more recent Asymmetric Key Package, RFC5958_): binary (DER) or ASCII (PEM). * `OpenSSH 6.5`_ and newer versions (ASCII). Private keys can be in the clear or password-protected. For details about the PEM encoding, see `RFC1421`_/`RFC1423`_. passphrase (byte string): The passphrase to use for decrypting a private key. Encryption may be applied protected at the PEM level (not recommended) or at the PKCS#8 level (recommended). This parameter is ignored if the key in input is not encrypted. curve_name (string): For a SEC1 encoding only. This is the name of the curve, as defined in the `ECC table`_. .. note:: To import EdDSA private and public keys, when encoded as raw ``bytes``, use: * :func:`Cryptodome.Signature.eddsa.import_public_key`, or * :func:`Cryptodome.Signature.eddsa.import_private_key`. .. note:: To import X25519/X448 private and public keys, when encoded as raw ``bytes``, use: * :func:`Cryptodome.Protocol.DH.import_x25519_public_key` * :func:`Cryptodome.Protocol.DH.import_x25519_private_key` * :func:`Cryptodome.Protocol.DH.import_x448_public_key` * :func:`Cryptodome.Protocol.DH.import_x448_private_key` Returns: :class:`EccKey` : a new ECC key object Raises: ValueError: when the given key cannot be parsed (possibly because the pass phrase is wrong). .. _RFC1421: https://datatracker.ietf.org/doc/html/rfc1421 .. _RFC1423: https://datatracker.ietf.org/doc/html/rfc1423 .. _RFC5915: https://datatracker.ietf.org/doc/html/rfc5915 .. _RFC5656: https://datatracker.ietf.org/doc/html/rfc5656 .. _RFC8709: https://datatracker.ietf.org/doc/html/rfc8709 .. _RFC5958: https://datatracker.ietf.org/doc/html/rfc5958 .. _`PKCS#8`: https://datatracker.ietf.org/doc/html/rfc5208 .. _`OpenSSH 6.5`: https://flak.tedunangst.com/post/new-openssh-key-format-and-bcrypt-pbkdf .. _SEC1: https://www.secg.org/sec1-v2.pdf r r� Ns -----BEGIN OPENSSH PRIVATE KEYs -----z -----BEGIN EC PARAMETERS-----z-----END EC PARAMETERS-----z.*?rW )�flagsz(Invalid DER encoding inside the PEM file)r� r� �0 r� zNo curve name was provided)rN z ECC key format is not supported)r� r� r r� r r� r� �re�sub�DOTALLr� r r: r� rA r r� ) r� r� rN r� Z text_encodedZopenssh_encoded�markerZenc_flagr^ Zecparams_startZ ecparams_endZ der_encodedZuefr r r � import_key� sL I � �� � r �__main__l ��_,)�N�$�c� hKf-5lk<X�k�# E Zp256i� z (P-256 G)i� �msz(P-256 arbitrary point))NNrp )@� __future__r r r� rY ZCryptodome.Util.py3compatr r r r r ZCryptodome.Math.Numbersr ZCryptodome.Util.asn1r r r r ZCryptodome.PublicKeyr r r ZCryptodome.Hashr r ZCryptodome.Randomr r7 r r r r r? r: r �objectr r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r �timer rf r� r" rO �start�ranger[ ZpointX�printr r r r �<module> s^ * G8 C;(!.7- ,~ �
| ver. 1.4 |
Github
|
.
| PHP 8.2.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings